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(57) Abstract: Secure communication is provided for entities 
in one or more networks. It is determined whether security 
measures needed for the communication exist between 
the entities. If such measures do not exist, the security 
measures are established, and the communication is initiated. 
The security measures include security bindings including 
information needed for the secure communication. Security 
measures are established between entities in one or more 
networks based on predetermined security requirements and 
on a determined needed security level. The security level 
needed may be determined based on whether the entities 
are in the same network or in different networks and/or on 
the information being transmitted. Security bindings are 
established between the entities depending on the information 
to be transmitted and/or the network to which the entities 
belong. The security bindings include information identifying 
the security binding, encryption information, authentication 
information, integrity information, a list of addressees or 
group of addressees included in the security bindings, and/or 
information regarding the lifetime of the security bindings. 
The encryption, authentication, and integrity may be specified 
at a parameter level. 
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FumishCharginglnfo 
(SRR->SSP) 


CAP 
REL97 


RESULT 

Parameter FreeFomatData 

A^>-* : £Efc&5£^-* 


FumishCharginglnfo 
(SCP->SSP) 


CAP 
REL97 



[0 0 4 2] 

[i3] 









RESULT 

Parameter: Authentication set 


SendAuthenticationlnfo 

(MSC/VLR -> HLR, 
VLRa -> VLRb) 


MAP 

VI, V2, REL96, REL97 



[0 0 4 3] 
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(SCCP) ft if) T^ffl^tL^lf^, MAPffcliCAP^Oha^ (0>J;L 

if. hbs«siSS*pa# id (ims i ) % wtott— ifxtt*xs?*iua« 

IS (MS I SDN) . VLR&ft,!:) <*: y tTi40)LxK;u-c-7^-b7.$tL-Ct «fc 
[0 0 4 4] 

*L<&-*?, -J7 U7f*X h (CI e a r T e x t ) g> C *l t> 0>/<5 * — $ £ 

KMRfcU ZtlbliMAPt^U- va><D«fL<B&^k (Encrypted) 

ai#i::##>*>*u ^x-ii^otfcy-efc^ : 

Param_1, Param_2, Param_3, Param_4 
4» L Par am_2 1 Pa r am_4j!><&a& T? <fc <£ ft t> If 
ClearText (ParatnJ. Param_3). Encrypted (Param_2, Param_4) 
[0 0 4 5] 

El 6 lc £ ftfc >— >!r >X If. Bg-^b $ ftfc/ < ^ > — $f (DiSHI |z*t j£-f 

<5>0>]7Ffl<]ft> -y-b— i?7P- £i*LTl^<5o SI 6 lzij*£;h.<i> J: o -fe^i'jT- 

HftS#*/£ltJi**iTl*ftl^ *fc(d\ **bJWIWjb<*7 LTl>£ ft &li . M 
*.lf. El 5 AlZfcl%T^£ftTl>&:?Q-trJ*£<£ffl LT. -tr^ri'J^f-f — tfi^*< 
5t3:£;h£o 1f*B<!:<!: tin* y-te—VrfmmZti&o (-fe*^. U T-f — tS 

*t*o f LT, Bt^b^tvy=fil$B^#5^^-li-v^J£S$ti^o (-tr^rzL'J^ 

#<b£ft£„ 

[0 0 4 6] 
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*$-<:7<!:^£*iTt«*: < . t^>3>at, * ^v'T 1 WIS 
[0 0 4 7] 

l±X-ry ^7 0 0frt>B§$&£*L<5 o 7s=r~j-yi 1 O-e. Sfixi/^r-f^-f 

7.=rv?l 2 OT^^ri'J^-r-tffi^O^^P^^illTLfc^^d^^^^+i, 
<5« tUf-;7*7 1 0"C. S^ixr/^-r^-r tO-tr^ri'J-r-r— ta^A<5t3:^ 

flTl^fcl^fflSSFtlfcj&V SfcliXf ? 7^7 2 0 T% iz^o. »J t=- -f — ]&%0>m 

7 8 0t'ifl7t'5, 
[0 0 4 8] 

£*l&o Xf'v7"7 6 0t, Dt^b/^^-^^ii^tL^o Xf'^7 7 0f 
% > v-b— S?A«afe«**i, ZkT-vJl 8 OT^a-trXTb^T-r*, 

[0 0 4 9] 
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[0 0 5 0] 

[S 4] 



* v -b — 




;7n h-zuu 


Update location 
(VLR->HLR) 


Allow originating services to 
unregistered subscribers 

fBfln*— tixz^mto a^jc^foi 


MAP 


ProvideSubscriberlnfo 
(HLR->MSC/VLR) 


Allow unallowed terminating 
calls 


MAP 


InsertSubscriberData 
(HLR->VLR) ! 


Allow services not provided to 
the subscriber 

Allow arming CAMEL TAPS 

CAMEL TAPS©««*WpT 


MAP 


InterrogateSS 
SSMPo^ 

(HLR->VLR) 


Request subscriber information 


MAP 


Anytime interrogation 
(gsmscf->HLR) 


Request subscriber information 


MAP 


Initial DP 
(gsmssf-> gsmscf) 


Its interception allows overcome 
possible controls 


CAP 



[005 1] 

(lu) ^u-va >icfc^T, §8«x>-ty -r-f ^tt*«#i?t, —JdX* 
. *fA*DA#-T— ^ (I SD) ^-^U— ->a >l-fcUT, aHlx^-fir-f ft<e 
BESRjRT?**) o ±&<Z>B§#lblz|l|LTa>teCD#li<!: LT. MAP^CAP^ 



(25) 
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P h=UU (#Jxli. IMS1. MS I SDN. V L Rl8u tOi&Ui:) cfc L J 4>T 

<z>it « * fc a i= itmim. & «p <* * i\ 

[0 0 5 2] 

ilRSftfc^U— S/3>l=f£l*M£*l4. *rLl*ttE (Authentic 
a t o r) $liMAPt^U-va >0>«f LL^BS^b**lfc»»l=**!> 

Param_1, Param_2 
t Lj&«X>T--f =f4 tfmUZtlZ&Wtfihtltf : 
ClearText (ParamJ, Param_2), Encrypted (Authenticator) 
[0 0 5 3] 

x > =r 4 =r << m x&m z ti & mm \z \tm * # * -< w & a . 

[0 0 5 4] 

*-r:7l ©igSElzfei^T. MttfcMttfc***— ©-b^aU-TY- 
l*BfIS(DmtE£Ifi3I^&C<hlc£:£ 0 t L-Ti?*;i,»«j6HSrLlv<^y— * <»: L 
[0 0 5 5] 

«£*1&T*££ 0 -jh.ic.fc y x ^fi>f^ x**<fiEE#£g«x>-x-r-T-f 1= 

in^i-r * - <t a< pigg i~ & * e *~tf7<7T-(7v& zmm i*&± x&ztutt 

Hits iMfix>T^^-rf£ltA<> f©t-r>3>+-^fflU. Bt^b^ttfc 
2 [K s n I n 2. ID (N1) % T % LKsnln2] X&^Xt&l^o 

&t<?t4 ?x&z>mm\z*c—h*£±x&htfo%.? tut. mmo>mmtfm±-f 
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[0 0 5 6] 

[0 0 5 7] 

n2 [eKpn2 [ K s n I n 2 , ID (N1) % T % Lks] // T V P ] T? 
[0 0 5 8] 

E8ic^$ttfrv— BfiEflMR£aHI"*-*fc*!>©* v-fe— 5??n— « 

. BBEflHRO^ t/-b— 5?*<3I«**l*. fit, ttr+i U t-w — tt£l=£ ljm 
a*#a^^-b-^l5St LT3t«3*iS. (■b^ra.ij-TY— tt5El=«ky«WW 

[0 0 5 9] 

$ (0>J*.l£. entityAuthenti cat ion information) lz##)t>;tx& 0 BliEltSI 
* * * t?3 >ft ttft S>*iT t. «k ^. 

[0 0 6 0] 

» BE1t«*ai«-r«fci<>l=*fT**LTt«kL^ 

[006 1] 



(27) 



2 O O 3 — 5 0 1 89 1 



MTHtotzmMMmiz&zt. mm<D^±fe < i n t e g r i t y ) i*. 

Param_1, Param_2 

ClearText (ParamJ, Param_2). Encrypted ( I ntegr ity) 
[0 0 6 2] 

L7cfci=>l£. 0iJ*l£* S5lz^^^,fc^P-trX^fflLT. -fe^n. 'J ^ -t8S 

ivc* > y-tr— ^rtsonia,*: Lxttmz&ijj&tbztL^ wmtz*iz> 0 fit 

[0 0 6 3] 

(fly*!*. ^±t£ffi$g) <Dtplz-£tbP>tiZ> 0 
[0 0 6 4] 

^±tttt« £2t(I-f £ fr ft IzSSfr £ *IT t £ L> „ 
[0 0 6 5] 
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[0 0 6 6] 

GSMv7fA0t+a'Jf^- V*v> > hlCgi^LT. CCITT No 
. 7©v^t'J>^ CAPMMAP^O K=WU£ffll^TlfclELT ^ 

[0®ammfci&Bjn 

l^^tfM<hg&L^oIfcBj£l£t;z£fcJ;oT<fc y m&lz&*> 5 . 
[01] 

[02] 

[03] 
[04] 

«*W**tt»l8l=1«6ofcS±^ii«fl!)fcaba)i/X-rA**-rBlTf*'5. 
[0 5 A] 

[05B] 
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■tr * =l >j t- -r — ta^ -t * /= ^ □ -t x omm &m ^^-r n -c & & . 

[El 7] 
[El 8] 
[09] 

So 
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[S3] 




SiEiJjREACTIVATION jgHj&T DEACTIVATION 




/^/G 3 
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[B4] 
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5 A] 



AUC 



ztmw 

AUC 



FIG. 5 A 
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[@5 B] 

HLR 



REQ. 



AuC f (TTP) AuC 2 (TTP) 



Alg l,Alg2; 
■b + rL U^-f • 2>^*2 : 

fgSElftffi, SR&; 

mv ; 

Ir^c^ — : YES " 
5B*flJ7 K U*<2 U * h : 
HLR 7 
ttJ&D:»*...) 



J0K 



t&£ : BIDHLR1 
7h'UX: VLR7 
: Ks 

^ : ^fElt& : ^^^.2 
: (iiS : 
7;U=fUXA : Alg2 



REQ. 



Alg 1 ,Alg 2; 
t + • {?Z>7S2. 

SSEtiHB. 

H^c^r — " Ks • 

HLR 7 KU* 
t + U^--f tftJtlD: 

BIDHLR1 ...) 

ACC. 
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(7;UzfUXA£>gf*Atl 
Alg 2; 

t + U^-f • ^J*2 : 

15 til 



: itLW. 



IS«{»J7 KU^'J^ h : 

VLR7 KU* 
t + a. U^-fl&^IDrBIDHLRI) 



tfi^ : BIDHLR1 
7 KlxX : HLR 7 KU* 
: Ks 

: Alg2 



(36) 



4#S2 003 — 501 891 



[06] 



3«« 




4 



FIG. 6 
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[07] 



( ■* /76! 7 




( &T ) — 780 
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[0 8] 



'MiEM 

JL>7-<< — 



2. iZ*=LV^4 



r/a a 



[19] 



2. H*zlVt4 
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